(A) If the state board of pharmacy establishes and maintains a drug database pursuant to section 4729.75 of the Revised Code, the board is authorized or required to provide information from the database in accordance with the following:

(1) On receipt of a request from a designated representative of a government entity responsible for the licensure, regulation, or discipline of health care professionals with authority to prescribe, administer, or dispense drugs, the board may provide to the representative information from the database relating to the professional who is the subject of an active investigation being conducted by the government entity.

(2) On receipt of a request from a federal officer, or a state or local officer of this or any other state, whose duties include enforcing laws relating to drugs, the board shall provide to the officer information from the database relating to the person who is the subject of an active investigation of a drug abuse offense, as defined in section 2925.01 of the Revised Code, being conducted by the officer's employing government entity.

(3) Pursuant to a subpoena issued by a grand jury, the board shall provide to the grand jury information from the database relating to the person who is the subject of an investigation being conducted by the grand jury.

(4) Pursuant to a subpoena, search warrant, or court order in connection with the investigation or prosecution of a possible or alleged criminal offense, the board shall provide information from the database as necessary to comply with the subpoena, search warrant, or court order.

(5) On receipt of a request from a prescriber or the prescriber's delegate approved by the board, the board shall provide to the prescriber a report of information from the database relating to a patient who is either a current patient of the prescriber or a potential patient of the prescriber based on a referral of the patient to the prescriber, if all of the following conditions are met:

(a) The prescriber certifies in a form specified by the board that it is for the purpose of providing medical treatment to the patient who is the subject of the request;

(b) The prescriber has not been denied access to the database by the board.

(6) On receipt of a request from a pharmacist or the pharmacist's delegate approved by the board, the board shall provide to the pharmacist information from the database relating to a current patient of the pharmacist, if the pharmacist certifies in a form specified by the board that it is for the purpose of the pharmacist's practice of pharmacy involving the patient who is the subject of the request and the pharmacist has not been denied access to the database by the board.

(7) On receipt of a request from an individual seeking the individual's own database information in accordance with the procedure established in rules adopted under section 4729.84 of the Revised Code, the board may provide to the individual the individual's own database information.

(8) On receipt of a request from a medical director or a pharmacy director of a managed care organization that has entered into a contract with the department of medicaid under section 5167.10 of the Revised Code and a data security agreement with the board required by section 5167.14 of the Revised Code, the board shall provide to the medical director or the pharmacy director information from the database relating to a medicaid recipient enrolled in the managed care organization, including information in the database related to prescriptions for the recipient that were not covered or reimbursed under a program administered by the department of medicaid.

(9) On receipt of a request from the medicaid director, the board shall provide to the director information from the database relating to a recipient of a program administered by the department of medicaid, including information in the database related to prescriptions for the recipient that were not covered or paid by a program administered by the department.

(10) On receipt of a request from a medical director of a managed care organization that has entered into a contract with the administrator of workers' compensation under division (B)(4) of section 4121.44 of the Revised Code and a data security agreement with the board required by section 4121.447 of the Revised Code, the board shall provide to the medical director information from the database relating to a claimant under Chapter 4121., 4123., 4127., or 4131. of the Revised Code assigned to the managed care organization, including information in the database related to prescriptions for the claimant that were not covered or reimbursed under Chapter 4121., 4123., 4127., or 4131. of the Revised Code, if the administrator of workers' compensation confirms, upon request from the board, that the claimant is assigned to the managed care organization.

(11) On receipt of a request from the administrator of workers' compensation, the board shall provide to the administrator information from the database relating to a claimant under Chapter 4121., 4123., 4127., or 4131. of the Revised Code, including information in the database related to prescriptions for the claimant that were not covered or reimbursed under Chapter 4121., 4123., 4127., or 4131. of the Revised Code.

(12) On receipt of a request from a prescriber or the prescriber's delegate approved by the board, the board shall provide to the prescriber information from the database relating to a patient's mother, if the prescriber certifies in a form specified by the board that it is for the purpose of providing medical treatment to a newborn or infant patient diagnosed as opioid dependent and the prescriber has not been denied access to the database by the board.

(13) On receipt of a request from the director of health, the board shall provide to the director information from the database relating to the duties of the director or the department of health in implementing the Ohio violent death reporting system established under section 3701.93 of the Revised Code.

(14) On receipt of a request from a requestor described in division (A)(1), (2), (5), or (6) of this section who is from or participating with another state's prescription monitoring program, the board may provide to the requestor information from the database, but only if there is a written agreement under which the information is to be used and disseminated according to the laws of this state.

(B) The state board of pharmacy shall maintain a record of each individual or entity that requests information from the database pursuant to this section. In accordance with rules adopted under section 4729.84 of the Revised Code, the board may use the records to document and report statistics and law enforcement outcomes.

The board may provide records of an individual's requests for database information to the following:

(1) A designated representative of a government entity that is responsible for the licensure, regulation, or discipline of health care professionals with authority to prescribe, administer, or dispense drugs who is involved in an active investigation being conducted by the government entity of the individual who submitted the requests for database information;

(2) A federal officer, or a state or local officer of this or any other state, whose duties include enforcing laws relating to drugs and who is involved in an active investigation being conducted by the officer's employing government entity of the individual who submitted the requests for database information.

(C) Information contained in the database and any information obtained from it is not a public record. Information contained in the records of requests for information from the database is not a public record. Information that does not identify a person may be released in summary, statistical, or aggregate form.

(D) A pharmacist or prescriber shall not be held liable in damages to any person in any civil action for injury, death, or loss to person or property on the basis that the pharmacist or prescriber did or did not seek or obtain information from the database.